Data Protection Information Baggage Tracing

We at AHS Aviation Handling Services GmbH take the protection of your personal data very seriously. We treat your personal data confidentially and in conformity with legal data protection regulations and this privacy policy.

We gladly provide to you the following information about data protection in fulfilment of our information obligations pursuant to Art. 12 et seqq. of the General Data Protection Regulation (GDPR):

Controller for Data Processing:

AHS Aviation Handling Services GmbH
Airport Plaza, Haus D, Ebene 4 | D-22335 Hamburg

You will find additional information about our company and the persons authorised to represent us as well as additional contact opportunities in the legal disclosures on our internet site:

Whenever you contact our baggage tracing service (Lost & Found), it is as a rule because you have not been able to find your baggage at your destination. Or possibly you have left a piece of baggage or an item on the plane and it has been handed in to the AHS station.

We, AHS Aviation Handling Services GmbH — Baggage Tracing — will be glad to assist you on behalf of the airline in the search for your baggage.

We use a service offered by SITA[1]* in cooperation with IATA[2]* for this purpose. This is an online baggage tracing service that we can use to determine the current location of your suitcase around the clock. This system functions globally and can therefore exchange information with all the airports that are connected to it.

We will require the following (personal data) from you for comparison with this information because we will otherwise not be able to find your baggage.

  • Surname, first name, telephone number, TAG number (uniquely generated code)
  • Personal identity document number (required for identification)
  • Address (if baggage will be delivered to the address)
What is the legal basis?

You have concluded a transport agreement with your airline. This agreement includes a contract obligation that your baggage will also land at your destination. If this obligation cannot be satisfied on occasion, the airline is responsible for tracing your baggage.

We are “vicarious agents” for the airline. This means that we trace your baggage on behalf of your airline and, when it has been located, hand it over to you personally or deliver it to the address you have specified.

The legal basis for this is point (b) of Art. 6 (1) GDPR.

How long are the data stored/processed? If this is not possible: What criteria are used for the determination of this period?

Your personal data are erased as soon as they are no longer required to achieve the purpose of their collection. It is possible, however, that we will be required to continue to store your data until certain statutory retention periods have expired. Moreover, we are permitted to store your data until the expiration of the statutory period of limitations (as a rule 3 years, but in some cases as long as 30 years) insofar as this is required for the establishment, exercise or defence of legal claims. The relevant data will be erased routinely at the end of any such periods.

Are the data transferred to third parties and, if so, to whom or to what category of recipients?

We enter your personal data in the online baggage tracing service so that we can find out where your baggage is located. In other words, there is a comparison of information. If your baggage has arrived at an airport other than the one at your destination, this information is entered into the system. This is the only way to find your baggage.

A “transfer” or “forwarding” of your personal data does not occur whenever we trace your baggage. There is only a comparison of your data.

Insofar as we locate a piece of baggage and enter the baggage number into the system so that this piece of baggage can be found again from this global system, there is a “transfer” of personal data. It is possible under certain circumstances that there will be a transfer to third countries or to international organisations. In these cases, we observe statutory requirements and request presentation of appropriate guarantees for the protection of your personal data.

Irrespective of the comparison of the information from the global system, it is definitely possible that your personal data must be processed in the competent business departments in our company.

In addition, it is also possible that we will transfer your personal data to companies that delivery your baggage to your address.

If the data transfer is not based on legal grounds or if the EU Commission has not issued an adequacy decision, we use the EU standard contract clauses.

What rights do you, the data subject, have?
  • The right to access (Art. 15 GDPR)
  • The right to rectification (Art. 16 GDPR)
  • The right to erasure (“right to be forgotten”) (Art. 17 GDPR)
  • The right to restriction of processing (Art. 18 GDPR)
  • The right to data portability (Art. 20 GDPR)
  • The right to objection (Art. 21 GDPR)

Pursuant to Art. 15 GDPR, you have the right to obtain information about the data stored about you.If incorrect personal data have been processed, you have the right to correction pursuant to Art. 16 GDPR.
If the legal requirements are met, you can request the deletion of this data or restriction of the processing this data, as well as raise objections to the data processing (Art. 17, 18 and 21 GDPR).
According to Art. 20 GDPR , you can assert the right on data transfer for data that is automatically processed on the basis of your consent or a contract with you.

If you wish to exercise your rights, you may send an email to We require the following information for identification:

  • Name
  • Postal address
  • Email address

You have the right to lodge a complaint with a supervisory authority:

If you believe that we have infringed on data protection regulations when processing your data, you have the right to lodge a complaint with a supervisory authority.

We fall under the jurisdiction of the following supervisory authority:

The Hamburg Representative for Data Protection and Freedom of Information

Ludwig-Erhard-Str 22, 7. OG, 20459 Hamburg

Phone: 040/ 4 28 54 - 40 40
Fax: 040/ 4 279 - 11811


We have appointed a data protection officer for our company:

AVIATICS Cost & Safety Management GmbH & Co. KG (legal entity)

Cologne Office

Edmund-Rumpler-Str. 6

51149 Cologne


Last revised: 12/12/2023

[1]Communications and IT provider that specialises in the aviation industry

[2] International Air Transport Association. Umbrella association of the airlines